The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L1 resources . - CVE-2020-8992: An issue was discovered in ext4_protect_reserved_inode in fs/ext4/block_validity.c that allowed attackers to cause a soft lockup via a crafted journal size . - CVE-2020-8648: There was a use-after-free vulnerability in the n_tty_receive_buf_common function in drivers/tty/n_tty.c . - CVE-2020-8428: There was a use-after-free bug in fs/namei.c, which allowed local users to cause a denial of service or possibly obtain sensitive information from kernel memory . - CVE-2020-7053: There was a use-after-free in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c . - CVE-2019-19045: A memory leak in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c allowed attackers to cause a denial of service by triggering mlx5_vector2eqn failures . - CVE-2019-16994: A memory leak existed in sit_init_net in net/ipv6/sit.c which might have caused denial of service . - CVE-2019-19054: A memory leak in the cx23888_ir_probe function in drivers/media/pci/cx23885/cx23888-ir.c allowed attackers to cause a denial of service by triggering kfifo_alloc failures . - CVE-2019-14896: A heap overflow was found in the add_ie_rates function of the Marvell Wifi Driver . - CVE-2019-14897: A stack overflow was found in the lbs_ibss_join_existing function of the Marvell Wifi Driver . - CVE-2019-19318: Mounting a crafted btrfs image twice could have caused a use-after-free . - CVE-2019-19036: An issue discovered in btrfs_root_node in fs/btrfs/ctree.c allowed a NULL pointer dereference because rcu_dereference can be zero . - CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures for some Intel Processors . - CVE-2019-19965: There was a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition . - CVE-2019-19927: Fixed an out-of-bounds read access when mounting a crafted f2fs filesystem image and performing some operations, related to ttm_put_pages in drivers/gpu/drm/ttm/ttm_page_alloc.c . The following non-security bugs were fixed: - 6pack,mkiss: fix possible deadlock . - ACPI / APEI: Switch estatus pool to use vmalloc memory . - ACPI: fix acpi_find_child_device invocation in acpi_preset_companion . - ACPI: PM: Avoid attaching ACPI PM domain to certain devices . - ACPI / video: Add force_none quirk for Dell OptiPlex 9020M . - ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards . - ACPI: watchdog: Allow disabling WDAT at boot . - ACPI / watchdog: Fix init failure with overlapping register regions . - ACPI / watchdog: Set default timeout in probe . - af_packet: set defaule value for tmo . - ALSA: control: remove useless assignment in .info callback of PCM chmap element . - ALSA: dummy: Fix PCM format loop in proc output . - ALSA: hda: Add Clevo W65_67SB the power_save blacklist . - ALSA: hda - Add docking station support for Lenovo Thinkpad T420s . - ALSA: hda: Add JasperLake PCI ID and codec vid . - ALSA: hda/analog - Minor optimization for SPDIF mux connections . - ALSA: hda - Apply sync-write workaround to old Intel platforms, too . - ALSA: hda: Clear RIRB status before reading WP . - ALSA: hda - constify and cleanup static NodeID tables . - ALSA: hda: constify copied structure . - ALSA: hda: Constify snd_kcontrol_new items . - ALSA: hda: Constify snd_pci_quirk tables . - ALSA: hda: correct kernel-doc parameter descriptions . - ALSA: hda/hdmi - add retry logic to parse_intel_hdmi . - ALSA: hda: hdmi - add Tigerlake support . - ALSA: hda/hdmi - Clean up Intel platform-specific fixup checks . - ALSA: hda: hdmi - fix pin setup on Tigerlake . - ALSA: hda: More constifications . - ALSA: hda: patch_hdmi: remove warnings with empty body . - ALSA: hda: patch_realtek: fix empty macro usage in if block . - ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker . - ALSA: hda/realtek - Add Headset Mic supported for HP cPC . - ALSA: hda/realtek - Add new codec supported for ALCS1200A . - ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen . - ALSA: hda/realtek - Apply mic mute LED quirk for Dell E7xx laptops, too . - ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC . - ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported . - ALSA: hda/realtek - Fix silent output on MSI-GL73 . - ALSA: hda/realtek - More constifications . - ALSA: hda/realtek - Set EAPD control to default for ALC222 . - ALSA: hda: Reset stream if DMA RUN bit not cleared . - ALSA: hda: Use scnprintf for printing texts for sysfs/procfs . - ALSA: seq: Avoid concurrent access to queue flags . - ALSA: seq: Fix concurrent access to queue current tick/time . - ALSA: seq: Fix racy access for queue timer in proc read . - ALSA: sh: Fix compile warning wrt const . - ALSA: sh: Fix unused variable warnings . - ALSA: usb-audio: Apply sample rate quirk for Audioengine D1 . - ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 . - ALSA: usb-audio: Fix endianess in descriptor validation . - ALSA: usb-audio: fix sync-ep altsetting sanity check . - arm64: Revert support for execute-only user mappings . - ASoC: au8540: use 64-bit arithmetic instead of 32-bit . - ASoC: cs4349: Use PM ops "cs4349_runtime_pm" . - ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1 . - ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI . - ASoC: sun8i-codec: Fix setting DAI data format . - ata: ahci: Add shutdown to freeze hardware resources of ahci . - ath10k: Correct the DMA direction for management tx buffers . - ath10k: pci: Fix comment on ath10k_pci_dump_memory_sram . - ath10k: pci: Only dump ATH10K_MEM_REGION_TYPE_IOREG when safe . - ath9k: fix storage endpoint lookup . - batman-adv: Fix DAT candidate selection on little endian systems . - bcache: add code comment bch_keylist_pop and bch_keylist_pop_front . - bcache: add code comments for state- gt;pool in __btree_sort . - bcache: add code comments in bch_btree_leaf_dirty . - bcache: add cond_resched in __bch_cache_cmp . - bcache: add idle_max_writeback_rate sysfs interface . - bcache: add more accurate error messages in read_super . - bcache: add readahead cache policy options via sysfs interface . - bcache: at least try to shrink 1 node in bch_mca_scan . - bcache: avoid unnecessary btree nodes flushing in btree_flush_write . - bcache: check return value of prio_read . - bcache: deleted code comments for dead code in bch_data_insert_keys . - bcache: do not export symbols . - bcache: explicity type cast in bset_bkey_last . - bcache: fix a lost wake-up problem caused by mca_cannibalize_lock . - bcache: Fix an error code in bch_dump_read . - bcache: fix deadlock in bcache_allocator . - bcache: fix incorrect data type usage in btree_flush_write . - bcache: fix memory corruption in bch_cache_accounting_clear . - bcache: fix static checker warning in bcache_device_free . - bcache: ignore pending signals when creating gc and allocator thread . - bcache: print written and keys in trace_bcache_btree_write . - bcache: reap c- gt;btree_cache_freeable from the tail in bch_mca_scan . - bcache: reap from tail of c- gt;btree_cache in bch_mca_scan . - bcache: remove macro nr_to_fifo_front . - bcache: remove member accessed from struct btree . - bcache: remove the extra cflags for request.o . - bcma: remove set but not used variable "sizel" . - blk-mq: avoid sysfs buffer overflow with too many CPU cores . - blk-mq: make sure that line break can be printed . - Bluetooth: Fix race condition in hci_release_sock . - bnxt: apply computed clamp value for coalece parameter . - bnxt_en: Fix MSIX request logic for RDMA driver . - bnxt_en: Return error if FW returns more data than dump length . - bonding: fix potential NULL deref in bond_update_slave_arr . - bonding: fix unexpected IFF_BONDING bit unset . - bpf: add self-check logic to liveness analysis . - bpf: add verifier stats and log_level bit 2 . - bpf: Fix incorrect verifier simulation of ARSH under ALU32 . - bpf: improve stacksafe state comparison . - bpf: improve verification speed by droping states . - bpf: improve verification speed by not remarking live_read . - bpf: improve verifier branch analysis . - bpf: increase complexity limit and maximum program size . - bpf: increase verifier log limit . - bpf: Reject indirect var_off stack access in raw mode . - bpf: Reject indirect var_off stack access in unpriv mode . - bpf: Sanity check max value for var_off stack access . - bpf/sockmap: Read psock ingress_msg before sk_receive_queue . - bpf: speed up stacksafe check . - bpf: Support variable offset stack access from helpers . - bpf: verifier: teach the verifier to reason about the BPF_JSET instruction . - brcmfmac: fix interface sanity check . - brcmfmac: Fix memory leak in brcmf_p2p_create_p2pdev . - brcmfmac: Fix memory leak in brcmf_usbdev_qinit . - brcmfmac: Fix use after free in brcmf_sdio_readframes . - brcmfmac: sdio: Fix OOB interrupt initialization on brcm43362 . - btrfs: abort transaction after failed inode updates in create_subvol . - btrfs: dev-replace: remove warning for unknown return codes when finished . - btrfs: do not call synchronize_srcu in inode_tree_del . - btrfs: do not double lock the subvol_sem for rename exchange . - Btrfs: fix block group remaining RO forever after error during device replace . - Btrfs: fix btrfs_write_inode vs delayed iput deadlock . - Btrfs: fix infinite loop during fsync after rename operations . - Btrfs: fix infinite loop during nocow writeback due to race . - btrfs: fix integer overflow in calc_reclaim_items_nr . - Btrfs: fix missing data checksums after replaying a log tree . - Btrfs: fix negative subv_writers counter and data space leak after buffered write . - Btrfs: fix race between adding and putting tree mod seq elements and nodes . - Btrfs: fix removal logic of the tree mod log that leads to use-after-free issues . - Btrfs: fix selftests failure due to uninitialized i_mode in test inodes . - btrfs: handle ENOENT in btrfs_uuid_tree_iterate . - btrfs: inode: Verify inode mode to avoid NULL pointer dereference . - Btrfs: make tree checker detect checksum items with overlapping ranges . - btrfs: Move btrfs_check_chunk_valid to tree-check.[ch] and export it . - btrfs: record all roots for rename exchange on a subvol . - btrfs: relocation: fix reloc_root lifespan and access . - btrfs: scrub: Require mandatory block group RO for dev-replace . - Btrfs: send, skip backreference walking for extents with many references . - btrfs: skip log replay on orphaned roots . - btrfs: tree-checker: Check chunk item at tree block read time . - btrfs: tree-checker: Check level for leaves and nodes . - btrfs: tree-checker: Enhance chunk checker to validate chunk profile . - btrfs: tree-checker: Fix wrong check on max devid . - btrfs: tree-checker: get fs_info from eb in block_group_err . - btrfs: tree-checker: get fs_info from eb in check_block_group_item . - btrfs: tree-checker: get fs_info from eb in check_csum_item . - btrfs: tree-checker: get fs_info from eb in check_dev_item . - btrfs: tree-checker: get fs_info from eb in check_dir_item . - btrfs: tree-checker: get fs_info from eb in check_extent_data_item . - btrfs: tree-checker: get fs_info from eb in check_inode_item . - btrfs: tree-checker: get fs_info from eb in check_leaf . - btrfs: tree-checker: get fs_info from eb in check_leaf_item . - btrfs: tree-checker: get fs_info from eb in chunk_err . - btrfs: tree-checker: get fs_info from eb in dev_item_err . - btrfs: tree-checker: get fs_info from eb in dir_item_err . - btrfs: tree-checker: get fs_info from eb in file_extent_err . - btrfs: tree-checker: get fs_info from eb in generic_err . - btrfs: tree-checker: Make btrfs_check_chunk_valid return EUCLEAN instead of EIO . - btrfs: tree-checker: Make chunk item checker messages more readable . - btrfs: tree-checker: Verify dev item . - btrfs: tree-checker: Verify inode item . - can: can_dropped_invalid_skb: ensure an initialized headroom in outgoing CAN sk_buffs . - can: gs_usb: gs_usb_probe: use descriptors of current altsetting . - can: mscan: mscan_rx_poll: fix rx path lockup when returning from polling to irq mode . - can, slip: Protect tty- gt;disc_data in write_wakeup and close with RCU . - cdrom: respect device capabilities during opening action . - cfg80211: check for set_wiphy_params . - cfg80211: fix deadlocks in autodisconnect work . - cfg80211: fix memory leak in cfg80211_cqm_rssi_update . - cfg80211: fix page refcount issue in A-MSDU decap . - cfg80211/mac80211: make ieee80211_send_layer2_update a public function . - cgroup: pids: use atomic64_t for pids- gt;limit . - chardev: Avoid potential use-after-free in "chrdev_open" . - CIFS: add support for flock . - CIFS: Close cached root handle only if it had a lease . - CIFS: Close open handle after interrupted close . - CIFS: close the shared root handle on tree disconnect . - CIFS: Do not miss cancelled OPEN responses . - CIFS: Fix lookup of root ses in DFS referral cache . - CIFS: Fix memory allocation in __smb2_handle_cancelled_cmd . - CIFS: fix mount option display for sec=krb5i . - CIFS: Fix mount options set in automount . - CIFS: Fix NULL pointer dereference in mid callback . - CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks . - CIFS: Fix potential softlockups while refreshing DFS cache . - CIFS: Fix retrieval of DFS referrals in cifs_mount . - CIFS: Fix use-after-free bug in cifs_reconnect . - CIFS: Properly process SMB3 lease breaks . - CIFS: remove set but not used variables "cinode" and "netfid" . - CIFS: Respect O_SYNC and O_DIRECT flags during reconnect . - clk: Do not try to enable critical clocks if prepare failed . - clk: imx: clk-composite-8m: add lock to gate/mux . - clk: mmp2: Fix the order of timer mux parents . - clk: qcom: rcg2: Do not crash if our parent can"t be found; return an error . - clk: rockchip: fix I2S1 clock gate register for rk3328 . - clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328 . - clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering . - clk: rockchip: fix rk3188 sclk_smc gate data . - clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock . - clk: sunxi: sun9i-mmc: Implement reset callback for reset controls . - clk: tegra: Mark fuse clock as critical . - clocksource/drivers/bcm2835_timer: Fix memory leak of timer . - clocksource: Prevent double add_timer_on for watchdog_timer . - closures: fix a race on wakeup from closure_sync . - closures: fix a race on wakeup from closure_sync . - crypto: af_alg - Use bh_lock_sock in sk_destruct . - crypto: api - Check spawn- gt;alg under lock in crypto_drop_spawn . - crypto: api - Fix race condition in crypto_spawn_alg . - crypto: atmel-sha - fix error handling when setting hmac key . - crypto: caam/qi2 - fix typo in algorithm"s driver name . - crypto: chelsio - fix writing tfm flags to wrong place . - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request . - crypto: picoxcell - adjust the position of tasklet_init and fix missed tasklet_kill . - crypto: reexport crypto_shoot_alg . - dmaengine: coh901318: Fix a double-lock bug . - dmaengine: coh901318: Remove unused variable . - dmaengine: Fix access to uninitialized dma_slave_caps . - dma-mapping: fix return type of dma_set_max_seg_size . - Documentation: Document arm64 kpti control . - drivers/base/memory.c: cache blocks in radix tree to accelerate lookup . - drivers/base/memory.c: do not access uninitialized memmaps in soft_offline_page_store . - drm/amd/display: Retrain dongles when SINK_COUNT becomes non-zero . - drm/amdgpu: add function parameter description in "amdgpu_device_set_cg_state" . - drm/amdgpu: add function parameter description in "amdgpu_gart_bind" . - drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 . - drm/amdgpu: remove 4 set but not used variable in amdgpu_atombios_get_connector_info_from_object_table . - drm/amdgpu: remove always false comparison in "amdgpu_atombios_i2c_process_i2c_ch" . - drm/amdgpu: remove set but not used variable "amdgpu_connector" . - drm/amdgpu: remove set but not used variable "dig" . - drm/amdgpu: remove set but not used variable "dig_connector" . - drm/amdgpu: remove set but not used variable "invalid" . - drm/amdgpu: remove set but not used variable "mc_shared_chmap" . - drm/amdgpu: remove set but not used variable "mc_shared_chmap" from "gfx_v6_0.c" and "gfx_v7_0.c" . - drm/amdgpu/{uvd,vcn}: fetch ring"s read_ptr after alloc . - drm/amd/powerplay: remove set but not used variable "us_mvdd" . - drm: bridge: dw-hdmi: constify copied structure . - drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ . - drm/fb-helper: Round up bits_per_pixel if possible . - drm/i810: Prevent underflow in ioctl - drm/i915: Add missing include file lt;linux/math64.h gt; . - drm/i915: Call dma_set_max_seg_size in i915_driver_hw_probe . - drm/i915: Fix pid leak with banned clients - drm/i915/gvt: Pin vgpu dma address before using - drm/i915/gvt: set guest display buffer as readonly - drm/i915/gvt: use vgpu lock for active state setting - drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set . - drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV . - drm/i915/perf: add missing delay for OA muxes configuration . - drm/i915: Sanity check mmap length against object size . - drm: limit to INT_MAX in create_blob ioctl . - drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable . - drm/mst: Fix MST sideband up-reply failure handling . - drm/nouveau/bar/gf100: ensure BAR is mapped . - drm/nouveau/bar/nv50: check bar1 vmm return value . - drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler . - drm/nouveau/mmu: qualify vmm during dtor . - drm/nouveau/secboot/gm20b: initialize pointer in gm20b_secboot_new . - drm/qxl: Return error if fbdev is not 32 bpp - drm/radeon: fix r1xx/r2xx register checker for POT textures - drm/rect: Avoid division by zero . - drm/rect: update kerneldoc for drm_rect_clip_scaled . - drm/rockchip: lvds: Fix indentation of a #define . - drm/sun4i: hdmi: Remove duplicate cleanup calls - drm/sun4i: tcon: Set min division of TCON0_DCLK to 1 . - drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model . - drm/ttm: ttm_tt_init_fields can be static . - drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add . - Enable CONFIG_BLK_DEV_SR_VENDOR . - enic: prevent waking up stopped tx queues over watchdog reset . - exit: panic before exit_mm on global init exit . - ext2: check err when partial != NULL . - ext4: check for directory entries too close to block end . - ext4: fix a bug in ext4_wait_for_tail_page_commit . - ext4: fix checksum errors with indexed dirs . - ext4: fix deadlock allocating crypto bounce page from mempool . - ext4: Fix mount failure with quota configured as module . - ext4: improve explanation of a mount failure caused by a misconfigured kernel . - ext4, jbd2: ensure panic when aborting with zero errno . - extcon: max8997: Fix lack of path setting in USB device mode . - firestream: fix memory leaks . - fix autofs regression caused by follow_managed changes . - fix dget_parent fastpath race . - Fix the locking in dcache_readdir and friends . - fjes: fix missed check in fjes_acpi_add . - fs: cifs: Fix atime update check vs mtime . - fscrypt: do not set policy for a dead directory . - fs/namei.c: fix missing barriers when checking positivity . - fs/namei.c: pull positivity check into follow_managed . - fs/open.c: allow opening only regular files during execve . - ftrace: Add comment to why rcu_dereference_sched is open coded . - ftrace: Avoid potential division by zero in function profiler . - ftrace: Protect ftrace_graph_hash with ftrace_sync . - genirq/proc: Return proper error code when irq_set_affinity fails . - gpio: Fix error message on out-of-range GPIO in lookup table . - gtp: avoid zero size hashtable . - gtp: do not allow adding duplicate tid and ms_addr pdp context . - gtp: fix an use-after-free in ipv4_pdp_find . - gtp: fix wrong condition in gtp_genl_dump_pdp . - HID: hidraw: Fix returning EPOLLOUT from hidraw_poll . - HID: hidraw, uhid: Always report EPOLLOUT . - hidraw: Return EPOLLOUT from hidraw_poll . - HID: uhid: Fix returning EPOLLOUT from uhid_char_poll . - hotplug/drc-info: Add code to search ibm,drc-info property . - hv_netvsc: Fix offset usage in netvsc_send_table . - hv_netvsc: Fix send_table offset in case of a host bug . - hv_netvsc: Fix tx_table init in rndis_set_subchannel . - hv_netvsc: Fix unwanted rx_table reset . - hwmon: Make volt2reg return same reg as reg2volt input . - hwmon: Do not use device managed functions for memory allocations . - hwmon: Add support for AMD family 17h, model 70h CPUs . - hwmon: Fix voltage limits to wrong registers . - hwmon: Fix PMBus polling of MFR_COMMON definitions . - i2c: imx: do not print error message on probe defer . - IB/hfi1: Do not cancel unused work item . - iio: adc: max9611: Fix too short conversion time delay . - iio: buffer: align the size of scan bytes to size of the largest element . - inet: protect against too small mtu values . - init: add arch_call_rest_init to allow stack switching . - init: add arch_call_rest_init to allow stack switching . - Input: aiptek - fix endpoint sanity check . - Input: gtco - fix endpoint sanity check . - Input: keyspan-remote - fix control-message timeouts . - Input: pegasus_notetaker - fix endpoint sanity check . - Input: pm8xxx-vib - fix handling of separate enable register . - Input: rmi_f54 - read from FIFO in 32 byte blocks . - Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register . - Input: sur40 - fix interface sanity checks . - Input: synaptics-rmi4 - simplify data read in rmi_f54_work . - iommu/amd: Fix IOMMU perf counter clobbering during init . - iommu/arm-smmu-v3: Populate VMID field for CMDQ_OP_TLBI_NH_VA . - iommu/io-pgtable-arm: Fix race handling in split_blk_unmap . - iommu/iova: Init the struct iova to fix the possible memleak . - iommu/mediatek: Correct the flush_iotlb_all callback . - iommu: Remove device link to group on failure . - iommu/vt-d: Unlink device if failed to add to group . - iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop . - iwlwifi: change monitor DMA to be coherent . - iwlwifi: clear persistence bit according to device family . - iwlwifi: do not throw error when trying to remove IGTK . - iwlwifi: mvm: fix NVM check for 3168 devices . - iwlwifi: trans: Clear persistence bit when starting the FW . - jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal . - jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer . - jbd2: Fix possible overflow in jbd2_log_space_left . - jbd2: make sure ESHUTDOWN to be recorded in the journal superblock . - jbd2: move the clearing of b_modified flag to the journal_unmap_buffer . - jbd2: switch to use jbd2_journal_abort when failed to submit the commit record . - kABI fixup for alloc_dax_region . - kABI: protect struct sctp_ep_common . - kABI: Protest new fields in BPF structs . - kabi/severities: Whitelist rpaphp_get_drc_props . - kABI workaround for can/skb.h inclusion . - kconfig: fix broken dependency in randconfig-generated .config . - kernel-binary.spec.in: do not recommend firmware for kvmsmall and azure flavor . - kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail . - KVM: Clean up __kvm_gfn_to_hva_cache_init and its callers . - KVM: fix spectrev1 gadgets . - KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails . - KVM: PPC: Book3S PR: Fix -Werror=return-type build failure . - KVM: PPC: Book3S PR: Free shared page if mmu initialization fails . - KVM: SVM: Override default MMIO mask if memory encryption is enabled . - kvm: x86: Host feature SSBD does not imply guest feature SPEC_CTRL_SSBD . - KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks . - KVM: x86: Protect ioapic_read_indirect from Spectre-v1/L1TF attacks . - KVM: x86: Protect ioapic_write_indirect from Spectre-v1/L1TF attacks . - KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data from Spectre-v1/L1TF attacks . - KVM: x86: Protect kvm_lapic_reg_write from Spectre-v1/L1TF attacks . - KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c . - KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit from Spectre-v1/L1TF attacks . - KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks . - KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks . - KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks . - KVM: x86: Refactor picdev_write to prevent Spectre-v1/L1TF attacks . - lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop . - leds: Allow to call led_classdev_unregister unconditionally . - leds: class: ensure workqueue is initialized before setting brightness . - lib: crc64: include lt;linux/crc64.h gt; for "crc64_be" . - lib: crc64: include lt;linux/crc64.h gt; for "crc64_be" . - libnvdimm: Fix devm_nsio_enable kabi . - libnvdimm/namespace: Differentiate between probe mapping and runtime mapping . - libnvdimm/pfn: Account for PAGE_SIZE gt; info-block-size in nd_pfn_init . - lib/scatterlist.c: adjust indentation in __sg_alloc_table . - lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more . - livepatch/samples/selftest: Use klp_shadow_alloc API correctly . - livepatch/selftest: Clean up shadow variable names and type . - livepatch: Simplify stack trace retrieval . - locking/rwsem: Prevent decrement of reader count before increment . - mac80211: Do not send Layer 2 Update frame before authorization . - mac80211: fix ieee80211_txq_setup_flows failure path . - mac80211: Fix TKIP replay protection immediately after key setup . - mac80211: mesh: restrict airtime metric to peered established plinks . - macvlan: do not assume mac_header is set in macvlan_broadcast . - macvlan: use skb_reset_mac_header in macvlan_queue_xmit . - md/raid0: Fix buffer overflow at debug print . - media: af9005: uninitialized variable printked . - media: cec: CEC 2.0-only bcast messages were ignored . - media: digitv: do not continue if remote control state can"t be read . - media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0 . - media: exynos4-is: fix wrong mdev and v4l2 dev order in error path . - media: gspca: zero usb_buf . - media: iguanair: fix endpoint sanity check . - media: ov6650: Fix crop rectangle alignment not passed back . - media: ov6650: Fix incorrect use of JPEG colorspace . - media: pulse8-cec: fix lost cec_transmit_attempt_done call. - media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors . - media/v4l2-core: set pages dirty upon releasing DMA buffers . - media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT . - media: v4l2-rect.h: fix v4l2_rect_map_inside top/left adjustments . - mfd: da9062: Fix watchdog compatible string . - mfd: dln2: More sanity checking for endpoints . - mfd: rn5t618: Mark ADC control register volatile . - mlxsw: spectrum_qdisc: Ignore grafting of invisible FIFO . - mmc: sdhci: Add a quirk for broken command queuing . - mmc: sdhci: fix minimum clock rate for v3 controller . - mmc: sdhci: Workaround broken command queuing on Intel GLK . - mmc: spi: Toggle SPI polarity, do not hardcode it . - mmc: tegra: fix SDR50 tuning override . - mm, debug_pagealloc: do not rely on static keys too early . - mm: memory_hotplug: use put_device if device_register fail . - mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock . - mod_devicetable: fix PHY module format . - mtd: fix mtd_oobavail incoherent returned value . - mwifiex: delete unused mwifiex_get_intf_num . - mwifiex: drop most magic numbers from mwifiex_process_tdls_action_frame . - mwifiex: update set_mac_address logic . - namei: only return -ECHILD from follow_dotdot_rcu . - net: add sendmsg_locked and sendpage_locked to af_inet6 . - net: bridge: deny dev_set_mac_address when unregistering . - net: dst: Force 4-byte alignment of dst_metrics . - net: ena: fix napi handler misbehavior when the napi budget is zero . - net: ethernet: ti: cpsw: fix extra rx interrupt . - net: hisilicon: Fix a BUG trigered by wrong bytes_compl . - net/mlx4_en: fix mlx4 ethtool -N insertion . - net/mlx5e: Fix set vf link state error flow . - net/mlxfw: Fix out-of-memory error in mfa2 flash burning . - net: nfc: nci: fix a possible sleep-in-atomic-context bug in nci_uart_tty_receive . - net: psample: fix skb_over_panic . - net: qlogic: Fix error paths in ql_alloc_large_buffers . - net: rtnetlink: prevent underflows in do_setvfinfo . - net/sched: act_pedit: fix WARN in the traffic path . - net: sched: correct flower port blocking . - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues . - net, sysctl: Fix compiler warning when only cBPF is present . - net: usb: lan78xx: Fix suspend/resume PHY register access error . - net: usb: lan78xx: limit size of local TSO packets . - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules . - new helper: lookup_positive_unlocked . - NFC: pn533: fix bulk-message timeout . - NFC: pn544: Adjust indentation in pn544_hci_check_presence . - nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info . - openvswitch: drop unneeded BUG_ON in ovs_flow_cmd_build_info . - openvswitch: remove another BUG_ON . - openvswitch: support asymmetric conntrack . - orinoco_usb: fix interface sanity check . - PCI: Add DMA alias quirk for Intel VCA NTB . - PCI: Do not disable bridge BARs when assigning bus resources . - PCI/IOV: Fix memory leak in pci_iov_add_virtfn . - PCI: rpaphp: Add drc-info support for hotplug slot registration . - PCI: rpaphp: Annotate and correctly byte swap DRC properties . - PCI: rpaphp: Avoid a sometimes-uninitialized warning . - PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-info . - PCI: rpaphp: Do not rely on firmware feature to imply drc-info support . - PCI: rpaphp: Fix up pointer to first drc-info entry . - PCI/switchtec: Fix vep_vector_number ioread width . - percpu: Separate decrypted varaibles anytime encryption can be enabled . - perf/x86/intel: Fix inaccurate period in context switch for auto-reload . - phy: qualcomm: Adjust indentation in read_poll_timeout . - pinctrl: cherryview: Fix irq_valid_mask calculation . - pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues . - pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELF_B and SD1_CLK_B . - platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 . - powerpc: Allow 64bit VDSO __kernel_sync_dicache to work across ranges gt;4GB . - powerpc: Allow flush_icache_range to work across ranges gt;4GB . - powerpc: avoid adjusting memory_limit for capture kernel memory reservation . - powerpc: Enable support for ibm,drc-info devtree property . - powerpc/irq: fix stack overflow verification . - powerpc/livepatch: return -ERRNO values in save_stack_trace_tsk_reliable . - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr . - powerpc/mm: Remove kvm radix prefetch workaround for Power9 DD2.2 . - powerpc/papr_scm: Do not enable direct map for a region by default . - powerpc/papr_scm: Fix leaking "bus_desc.provider_name" in some paths . - powerpc/pkeys: remove unused pkey_allows_readwrite . - powerpc/pseries: Add cpu DLPAR support for drc-info property . - powerpc/pseries: Advance pfn if section is not present in lmb_is_removable . - powerpc/pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce for DDW . - powerpc/pseries: Enable support for ibm,drc-info property . - powerpc/pseries: Fix bad drc_index_start value parsing of drc-info entry . - powerpc/pseries: Fix drc-info mappings of logical cpus to drc-index . - powerpc/pseries: Fix vector5 in ibm architecture vector table . - powerpc/pseries/hotplug-memory: Change rc variable to bool . - powerpc/pseries/lparcfg: Fix display of Maximum Memory . - powerpc/pseries: Revert support for ibm,drc-info devtree property . - powerpc/pseries/vio: Fix iommu_table use-after-free refcount warning . - powerpc: reserve memory for capture kernel after hugepages init . - powerpc/security: Fix debugfs data leak on 32-bit . - powerpc/tm: Fix clearing MSR[TS] in current when reclaiming on signal delivery . - powerpc/tools: Do not quote $objdump in scripts . - powerpc/xive: Discard ESB load value when interrupt is invalid . - powerpc/xive: Skip ioremap of ESB pages for LSI interrupts . - powerpc/xmon: do not access ASDR in VMs . - power: supply: ltc2941-battery-gauge: fix use-after-free . - ppp: Adjust indentation into ppp_async_input . - pseries/drc-info: Search DRC properties for CPU indexes . - pstore/ram: Write new dumps to start of recycled zones . - pwm: omap-dmtimer: Remove PWM chip in .remove before making it unfunctional . - pwm: Remove set but not set variable "pwm" . - pxa168fb: Fix the function used to release some memory in an error - qede: Disable hardware gro when xdp prog is installed . - qede: Fix multicast mac configuration . - qmi_wwan: Add support for Quectel RM500Q . - quota: Check that quota is not dirty before release . - quota: fix livelock in dquot_writeback_dquots . - r8152: add missing endpoint sanity check . - r8152: get default setting of WOL before initializing . - RDMA/bnxt_re: Avoid freeing MR resources if dereg fails . - regulator: Fix return value of _set_load stub . - regulator: rk808: Lower log level on optional GPIOs being not available . - regulator: rn5t618: fix module aliases . - reiserfs: Fix memory leak of journal device string . - reiserfs: Fix spurious unlock in reiserfs_fill_super error handling . - rpm/kabi.pl: support new Module.symvers format - rpm/kernel-binary.spec.in: Conflict with too old powerpc-utils . - rpm/kernel-binary.spec.in: Replace Novell with SUSE - rsi_91x_usb: fix interface sanity check . - rtc: cmos: Stop using shared IRQ . - rtc: dt-binding: abx80x: fix resistance scale . - rtc: hym8563: Return -EINVAL if the time is known to be invalid . - rtc: max8997: Fix the returned value in case of error in "max8997_rtc_read_alarm" . - rtc: msm6242: Fix reading of 10-hour digit . - rtc: pcf8523: set xtal load capacitance from DT . - rtc: s35390a: Change buf"s type to u8 in s35390a_init . - rtl8xxxu: fix interface sanity check . - rtlwifi: Fix MAX MPDU of VHT capability . - rtlwifi: Remove redundant semicolon in wifi.h . - s390: add stack switch helper . - s390: add support for virtually mapped kernel stacks . - s390: always inline current_stack_pointer . - s390: always inline disabled_wait . - s390: avoid misusing CALL_ON_STACK for task stack setup . - s390: clean up stacks setup . - s390: correct CALL_ON_STACK back_chain saving . - s390: disable preemption when switching to nodat stack with CALL_ON_STACK . - s390: fine-tune stack switch helper . - s390: fix register clobbering in CALL_ON_STACK . - s390/ftrace: generate traced function stack frame . - s390/ftrace: save traced function caller . - s390/ftrace: use HAVE_FUNCTION_GRAPH_RET_ADDR_PTR . - s390/head64: correct init_task stack setup . - s390: kabi workaround for ftrace_ret_stack . - s390: kabi workaround for lowcore changes due to vmap stack . - s390: kabi workaround for reliable stack tracing . - s390/kasan: avoid false positives during stack unwind . - s390/kasan: avoid report in get_wchan . - s390/livepatch: Implement reliable stack tracing for the consistency model . - s390: preserve kabi for stack unwind API . - s390/process: avoid custom stack unwinding in get_wchan . - s390/stacktrace: use common arch_stack_walk infrastructure . - s390/suspend: fix stack setup in swsusp_arch_suspend . - s390/test_unwind: print verbose unwinding results . - s390: unify stack size definitions . - s390/unwind: add stack pointer alignment sanity checks . - s390/unwind: always inline get_stack_pointer . - s390/unwind: avoid int overflow in outside_of_stack . - s390/unwind: cleanup unused READ_ONCE_TASK_STACK . - s390/unwind: correct stack switching during unwind . - s390/unwind: drop unnecessary code around calling ftrace_graph_ret_addr . - s390/unwind: filter out unreliable bogus %r14 . - s390/unwind: fix get_stack_pointer . - s390/unwind: fix mixing regs and sp . - s390/unwind: introduce stack unwind API . - s390/unwind: make reuse_sp default when unwinding pt_regs . - s390/unwind: remove stack recursion warning . - s390/unwind: report an error if pt_regs are not on stack . - s390/unwind: start unwinding from reliable state . - s390/unwind: stop gracefully at task pt_regs . - s390/unwind: stop gracefully at user mode pt_regs in irq stack . - s390/unwind: unify task is current checks . - scsi: lpfc: fix build failure with DEBUGFS disabled . - scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport . - scsi: qla2xxx: Add D-Port Diagnostic reason explanation logs . - scsi: qla2xxx: Cleanup unused async_logout_done . - scsi: qla2xxx: Consolidate fabric scan . - scsi: qla2xxx: Correct fcport flags handling . - scsi: qla2xxx: Fix a NULL pointer dereference in an error path . - scsi: qla2xxx: Fix fabric scan hang . - scsi: qla2xxx: Fix mtcp dump collection failure . - scsi: qla2xxx: Fix RIDA Format-2 . - scsi: qla2xxx: Fix stuck login session using prli_pend_timer . - scsi: qla2xxx: Fix stuck session in GNL . - scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size return type . - scsi: qla2xxx: Fix unbound NVME response length . - scsi: qla2xxx: Fix update_fcport for current_topology . - scsi: qla2xxx: Improve readability of the code that handles qla_flt_header . - scsi: qla2xxx: Remove defer flag to indicate immeadiate port loss . - scsi: qla2xxx: Update driver version to 10.01.00.22-k . - scsi: qla2xxx: Use common routine to free fcport struct . - scsi: qla2xxx: Use get_unaligned_* instead of open-coding these functions . - sctp: cache netns in sctp_ep_common . - sctp: fully initialize v4 addr in some functions . - serial: 8250_bcm2835aux: Fix line mismatch on driver unbind . - serial: ifx6x60: add missed pm_runtime_disable . - serial: pl011: Fix DMA - gt;flush_buffer . - serial: serial_core: Perform NULL checks for break_ctl ops . - serial: stm32: fix transmit_chars when tx is stopped . - sfc: Only cancel the PPS workqueue if it exists . - sfc: Remove "PCIE error reporting unavailable" . - sh_eth: check sh_eth_cpu_data::dual_port when dumping registers . - sh_eth: fix dumping ARSTR . - sh_eth: fix invalid context bug while calling auto-negotiation by ethtool . - sh_eth: fix invalid context bug while changing link options by ethtool . - sh_eth: fix TSU init on SH7734/R8A7740 . - sh_eth: fix TXALCR1 offsets . - sh_eth: TSU_QTAG0/1 registers the same as TSU_QTAGM0/1 . - SMB3: Fix crash in SMB2_open_init due to uninitialized field in compounding path . - SMB3: Fix persistent handles reconnect . - smb3: fix refcount underflow warning on unmount when no directory leases . - smb3: remove confusing dmesg when mounting with encryption . - soc: renesas: rcar-sysc: Add goto to of_node_put before return . - soc/tegra: fuse: Correct straps" address for older Tegra124 device trees . - soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot . - spi: tegra114: clear packed bit for unpacked mode . - spi: tegra114: configure dma burst size to fifo trig level . - spi: tegra114: fix for unpacked mode transfers . - spi: tegra114: flush fifos . - spi: tegra114: terminate dma and reset on transfer timeout . - sr_vendor: support Beurer GL50 evo CD-on-a-chip devices . - stacktrace: Do not skip first entry on noncurrent tasks . - stacktrace: Force USER_DS for stack_trace_save_user . - stacktrace: Get rid of unneeded "!!" pattern . - stacktrace: Provide common infrastructure . - stacktrace: Provide helpers for common stack trace operations . - stacktrace: Unbreak stack_trace_save_tsk_reliable . - stacktrace: Use PF_KTHREAD to check for kernel threads . - staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 . - Staging: iio: adt7316: Fix i2c data reading, set the data field . - staging: rtl8188eu: fix interface sanity check . - staging: vt6656: correct packet types for CTS protect, mode . - staging: vt6656: Fix false Tx excessive retries reporting . - staging: vt6656: use NULLFUCTION stack on mac80211 . - staging: wlan-ng: ensure error return is actually returned . - stop_machine: Atomically queue and wake stopper threads . - stop_machine: Disable preemption after queueing stopper threads . - stop_machine: Disable preemption when waking two stopper threads . - stop_machine, sched: Fix migrate_swap vs. active_balance deadlock . - swiotlb: do not panic on mapping failures . - swiotlb: remove the overflow buffer . - tcp: clear tp- gt;packets_out when purging write queue . - tcp: do not send empty skb from tcp_write_xmit . - tcp: exit if nothing to retransmit on RTO timeout . - tcp: md5: fix potential overestimation of TCP option space . - Temporary workaround for bsc#1159096 should no longer be needed. - tracing: Annotate ftrace_graph_hash pointer with __rcu . - tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu . - tracing: Cleanup stack trace code . - tracing: Fix very unlikely race of registering two stat tracers . - tracing: Have the histogram compare functions convert to u64 first . - tracing: xen: Ordered comparison of function pointers . - tty: n_hdlc: fix build on SPARC . - tty/serial: atmel: Add is_half_duplex helper . - tty: serial: msm_serial: Fix lockup for sysrq and oops . - tty: vt: keyboard: reject invalid keycodes . - ubifs: do not trigger assertion on invalid no-key filename . - ubifs: Fix deadlock in concurrent bulk-read and writepage . - ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag . - ubifs: Reject unsupported ioctl flags explicitly . - udp: fix integer overflow while computing available space in sk_rcvbuf . - USB: atm: ueagle-atm: add missing endpoint check . - USB: chipidea: host: Disable port power only if previously enabled . - USB: core: fix check for duplicate endpoints . - USB: core: hub: Improved device recognition on remote wakeup . - USB: dwc3: turn off VBUS when leaving host mode . - USB: EHCI: Do not return -EPIPE when hub is disconnected . - USB: gadget: f_ncm: Use atomic_t to track in-flight request . - USB: gadget: legacy: set max_speed to super-speed . - USB: gadget: Zero ffs_io_data . - USB: host: xhci-hub: fix extra endianness conversion . - USBip: Fix error path of vhci_recv_ret_submit . - USB: musb: dma: Correct parameter passed to IRQ handler . - USB: musb: fix idling for suspend after disconnect interrupt . - USB: roles: fix a potential use after free . - USB: serial: ch341: handle unbound port at reset_resume . - USB: serial: io_edgeport: add missing active-port sanity check . - USB: serial: io_edgeport: handle unbound ports on URB completion . - USB: serial: io_edgeport: use irqsave in USB"s complete callback . - USB: serial: ir-usb: add missing endpoint sanity check . - USB: serial: ir-usb: fix IrLAP framing . - USB: serial: ir-usb: fix link-speed handling . - USB: serial: keyspan: handle unbound ports . - USB: serial: opticon: fix control-message timeouts . - USB: serial: option: Add support for Quectel RM500Q . - USB: serial: option: add support for Quectel RM500Q in QDL mode . - USB: serial: option: add Telit ME910G1 0x110a composition . - USB: serial: option: add ZLP support for 0x1bc7/0x9010 . - USB: serial: quatech2: handle unbound ports . - USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx . - USB: serial: suppress driver bind attributes . - usb-storage: Disable UAS on JMicron SATA enclosure . - USB: typec: tcpci: mask event interrupts when remove driver . - vhost/vsock: accept only packets with the right dst_cid . - virtio_ring: fix unmap of indirect descriptors . - watchdog: max77620_wdt: fix potential build errors . - watchdog: rn5t618_wdt: fix module aliases . - watchdog: wdat_wdt: fix get_timeleft call for wdat_wdt . - wireless: fix enabling channel 12 for custom regulatory domain . - wireless: wext: avoid gcc -O3 warning . - workqueue: Fix pwq ref leak in rescuer_thread . - x86/amd_nb: Add PCI device IDs for family 17h, model 70h . - x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR . - x86/intel_rdt: Split resource group removal in two . - x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI . - x86/MCE/AMD: Allow any CPU to initialize the smca_banks array . - x86/MCE/AMD: Allow Reserved types to be overwritten in smca_banks . - x86/MCE/AMD: Do not use rdmsr_safe_on_cpu in smca_configure . - x86/MCE: Fix possibly incorrect severity calculation on AMD . - x86/resctrl: Check monitoring static key in the MBM overflow handler . - x86/resctrl: Fix a deadlock due to inaccurate reference . - x86/resctrl: Fix an imbalance in domain_remove_cpu . - x86/resctrl: Fix potential memory leak . - x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup . - x86/resctrl: Fix use-after-free when deleting resource groups . - x86/resctrl: Prevent possible overrun during bitmap operations . - xen/balloon: Support xend-based toolstack take two . - xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk . - xen-blkfront: switch kcalloc to kvcalloc for large array allocation . - xen: Enable interrupts when calling _cond_resched . - xfrm: fix sa selector validation . - xfrm: Fix transport mode skb control buffer usage . - xfs: Fix tail rounding in xfs_alloc_file_space . - xhci: Fix memory leak in xhci_add_in_port . - xhci: fix USB3 device initiated resume race with roothub autosuspend . - xhci: make sure interrupts are restored to correct state . - zd1211rw: fix storage endpoint lookup . Special Instructions and Notes: Please reboot the system after installing this update.